CVE-2026-126076

A flaw was found in actionpack. During concurrent web requests, the session cache store writes session data back to the cache without verifying whether the session has already been invalidated or deleted. A remote attacker possessing a stolen session identifier could exploit this race condition t...